sock_diag: fix use-after-free read in __sk_free